NULL pointer dereference in Linux kernel - CVE-2018-10322

Vulnerability identifier: #VU12186

CSH Severity: Low

CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-10322

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists in the xfs_dinode_verify function in the xfs/xfs/libxfs/xfs_inode_buf.c source code file due to NULL pointer dereference when handling Extended File System (XFS) images. A local attacker can mount a specially crafted XFS filesystem image when filesystem operations are executed on the mounted image and cause the service to crash.

Linux kernel
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Ubuntu
Fedora
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-generic-lpae-lts-xenial (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-powerpc64-smp (Ubuntu package)
linux-image-powerpc64-emb (Ubuntu package)
linux-image-powerpc-smp (Ubuntu package)
linux-image-powerpc-e500mc (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.4.0-193-powerpc64-emb (Ubuntu package)
linux-image-4.4.0-193-powerpc64-smp (Ubuntu package)
linux-image-4.4.0-193-powerpc-smp (Ubuntu package)
linux-image-4.4.0-193-powerpc-e500mc (Ubuntu package)
linux-image-4.4.0-193-lowlatency (Ubuntu package)
linux-image-4.4.0-193-generic-lpae (Ubuntu package)
linux-image-4.4.0-193-generic (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-1081-aws (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-1082-kvm (Ubuntu package)
linux-image-4.4.0-1117-aws (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.4.0-1141-raspi2 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.4.0-1145-snapdragon (Ubuntu package)
kernel-alt (Red Hat package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-lpae-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-4.15.0-120-lowlatency (Ubuntu package)
linux-image-4.15.0-120-generic-lpae (Ubuntu package)
linux-image-4.15.0-120-generic (Ubuntu package)
linux-image-4.15.0-121-lowlatency (Ubuntu package)
linux-image-4.15.0-121-generic-lpae (Ubuntu package)
linux-image-4.15.0-121-generic (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-4.15.0-1056-oracle (Ubuntu package)
linux-image-4.15.0-1057-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-gke-4.15 (Ubuntu package)
linux-image-4.15.0-1072-gke (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-4.15.0-1073-raspi2 (Ubuntu package)
linux-image-4.15.0-1077-kvm (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-4.15.0-1085-aws (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1086-aws (Ubuntu package)
linux-image-4.15.0-1086-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1089-snapdragon (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-4.15.0-1098-azure (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1099-oem (Ubuntu package)
linux-image-4.15.0-1099-azure (Ubuntu package)
kernel

Cybersecurity Help is currently unaware of any solutions addressing the vulnerability.

linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.193.169
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.193.169
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.193.169
linux-image-generic-lpae-lts-xenial (Ubuntu package) - update to 4.4.0.193.169
linux-image-virtual (Ubuntu package) - addressed in versions 4.4.0.193.199, 4.15.0.121.108
linux-image-powerpc64-smp (Ubuntu package) - update to 4.4.0.193.199
linux-image-powerpc64-emb (Ubuntu package) - update to 4.4.0.193.199
linux-image-powerpc-smp (Ubuntu package) - update to 4.4.0.193.199
linux-image-powerpc-e500mc (Ubuntu package) - update to 4.4.0.193.199
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.4.0.193.199, 4.15.0.121.108
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.4.0.193.199, 4.15.0.121.108
linux-image-generic (Ubuntu package) - addressed in versions 4.4.0.193.199, 4.15.0.121.108
linux-image-4.4.0-193-powerpc64-emb (Ubuntu package) - update to 4.4.0-193.224
linux-image-4.4.0-193-powerpc64-smp (Ubuntu package) - update to 4.4.0-193.224
linux-image-4.4.0-193-powerpc-smp (Ubuntu package) - update to 4.4.0-193.224
linux-image-4.4.0-193-powerpc-e500mc (Ubuntu package) - update to 4.4.0-193.224
linux-image-4.4.0-193-lowlatency (Ubuntu package) - addressed in versions 4.4.0-193.224, 4.4.0-193.224~14.04.1
linux-image-4.4.0-193-generic-lpae (Ubuntu package) - addressed in versions 4.4.0-193.224, 4.4.0-193.224~14.04.1
linux-image-4.4.0-193-generic (Ubuntu package) - addressed in versions 4.4.0-193.224, 4.4.0-193.224~14.04.1
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.1081.78, 4.4.0.1117.122
linux-image-4.4.0-1081-aws (Ubuntu package) - update to 4.4.0-1081.85
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.1082.80, 4.15.0.1077.73
linux-image-4.4.0-1082-kvm (Ubuntu package) - update to 4.4.0-1082.91
linux-image-4.4.0-1117-aws (Ubuntu package) - update to 4.4.0-1117.131
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.4.0.1141.141, 4.15.0.1073.70
linux-image-4.4.0-1141-raspi2 (Ubuntu package) - update to 4.4.0-1141.151
linux-image-snapdragon (Ubuntu package) - addressed in versions 4.4.0.1145.137, 4.15.0.1089.92
linux-image-4.4.0-1145-snapdragon (Ubuntu package) - update to 4.4.0-1145.155
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.120.121
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.120.121
linux-image-generic-lpae-hwe-16.04 (Ubuntu package) - update to 4.15.0.120.121
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.120.121
linux-image-oem (Ubuntu package) - addressed in versions 4.15.0.120.121, 4.15.0.1099.103
linux-image-4.15.0-120-lowlatency (Ubuntu package) - update to 4.15.0-120.122~16.04.1
linux-image-4.15.0-120-generic-lpae (Ubuntu package) - update to 4.15.0-120.122~16.04.1
linux-image-4.15.0-120-generic (Ubuntu package) - update to 4.15.0-120.122~16.04.1
linux-image-4.15.0-121-lowlatency (Ubuntu package) - update to 4.15.0-121.123
linux-image-4.15.0-121-generic-lpae (Ubuntu package) - update to 4.15.0-121.123
linux-image-4.15.0-121-generic (Ubuntu package) - update to 4.15.0-121.123
linux-image-oracle (Ubuntu package) - update to 4.15.0.1056.46
linux-image-4.15.0-1056-oracle (Ubuntu package) - update to 4.15.0-1056.61~16.04.1
linux-image-4.15.0-1057-oracle (Ubuntu package) - update to 4.15.0-1057.62
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1057.67
linux-image-gke-4.15 (Ubuntu package) - update to 4.15.0.1072.76
linux-image-4.15.0-1072-gke (Ubuntu package) - update to 4.15.0-1072.76
linux-image-gke (Ubuntu package) - addressed in versions 4.15.0.1072.76, 4.15.0.1086.87
linux-image-4.15.0-1073-raspi2 (Ubuntu package) - update to 4.15.0-1073.78
linux-image-4.15.0-1077-kvm (Ubuntu package) - update to 4.15.0-1077.79
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1085.81
linux-image-4.15.0-1085-aws (Ubuntu package) - update to 4.15.0-1085.90~16.04.1
linux-image-gcp (Ubuntu package) - update to 4.15.0.1086.87
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1086.88
linux-image-4.15.0-1086-aws (Ubuntu package) - update to 4.15.0-1086.91
linux-image-4.15.0-1086-gcp (Ubuntu package) - addressed in versions 4.15.0-1086.98, 4.15.0-1086.98~16.04.1
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1086.104
linux-image-4.15.0-1089-snapdragon (Ubuntu package) - update to 4.15.0-1089.98
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1098.74, 4.15.0.1098.92
linux-image-4.15.0-1098-azure (Ubuntu package) - addressed in versions 4.15.0-1098.109~14.04.1, 4.15.0-1098.109~16.04.1
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1099.72
linux-image-4.15.0-1099-oem (Ubuntu package) - update to 4.15.0-1099.109
linux-image-4.15.0-1099-azure (Ubuntu package) - update to 4.15.0-1099.110
kernel - update to 4.16.8-300.fc28

• https://bugzilla.kernel.org/show_bug.cgi?id=199377

• Denial of service in Linux Kernel
• Ubuntu update for linux
• Ubuntu update for linux
• Fedora 28 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-alt